@event4u/agent-config 16.4.0 → 17.0.0

package/src/scripts/ai-image/adapters/flux.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # flux.sh — Black Forest Labs FLUX photoreal image adapter.
 #
 # Capability: audio=none (still image). Photorealism path

package/src/scripts/ai-image/adapters/gemini-image.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # gemini-image.sh — Google Gemini image-generation adapter (Nano Banana family + Imagen 4).
 #
 # Capability: audio=none (still image). General-purpose image generation

package/src/scripts/ai-image/adapters/ideogram.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # ideogram.sh — Ideogram text-in-image adapter (logos / banners / typographic art).
 #
 # Capability: audio=none (still image). Ideogram is the text-in-image default

package/src/scripts/ai-image/adapters/recraft.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # recraft.sh — Recraft vector / SVG image adapter (true <path> logos + icons).
 #
 # Capability: audio=none (still image / vector). The vector path

package/src/scripts/ai-video/adapters/comfyui.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # comfyui.sh — local ComfyUI multiplexer adapter: the local-free render
 # path for GPU users (Wan2.2 TI2V-5B default template, LTX-2 for
 # audio-sync). Sandbox model locked by ADR-060 — read it before touching

package/src/scripts/ai-video/adapters/fal.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # fal.sh — fal.ai multiplexer adapter: one adapter, many video models.
 #
 # Capability: per-model. fal.ai exposes ONE uniform async queue API over

package/src/scripts/ai-video/adapters/gemini-veo.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # gemini-veo.sh — Google Gemini Veo video generation adapter.
 #
 # Capability: audio=native. Veo accepts dialogue + ambient sound blocks

package/src/scripts/ai-video/adapters/higgsfield.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # higgsfield.sh — Higgsfield motion-preset video adapter.
 #
 # Capability: per-model. The provider exposes named motion presets

package/src/scripts/ai-video/adapters/kling.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # kling.sh — Kuaishou Kling motion-tuned video generation adapter.
 #
 # Capability: audio=none by default (Kling current generation does not

package/src/scripts/ai-video/adapters/musetalk.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # musetalk.sh — MuseTalk-class LOCAL lip-sync adapter: the offline (MIT)
 # alternative to the hosted sync.so post-process. One rendered clip plus
 # one audio line in, a lip-synced clip out — no network, no spend.

package/src/scripts/ai-video/adapters/openai-images.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # openai-images.sh — image generation adapter (DALL-E / gpt-image-1).
 #
 # Capability: audio=none (still images only — motion handled by a

package/src/scripts/ai-video/adapters/replicate.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # replicate.sh — Replicate multiplexer adapter: one adapter, many models.
 #
 # Capability: per-model. Replicate exposes ONE uniform predictions API

package/src/scripts/ai-video/adapters/sora.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # sora.sh — OpenAI Sora structural-prompt video adapter.
 #
 # Capability: audio=native. Sora-class models produce muxed MP4 with

package/src/scripts/ai-video/adapters/syncso.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# egress-content: session-content uncovered — the generation prompt is an operator-authored brief sent from a shell adapter the TypeScript engine does not reach
 # syncso.sh — sync.so lip-sync post-process adapter: one rendered clip +
 # one audio line in, a lip-synced clip out. Hosted, singing-capable, no
 # GPU — the reference implementation for the lip-sync adapter class.

package/src/scripts/ai-video/stitch.sh

@@ -99,6 +99,10 @@ case "${DRYRUN}" in
   *) DRYRUN_FLAG=1 ;;
 esac
 [ "${DRYRUN_FLAG}" -eq 0 ] && aiv_require_cmd ffmpeg
+# ffprobe is now a hard dependency of EVERY real run, not only of handoff mode:
+# steps 6.4 and 6.5 open each clip before concat and measure the output after
+# it, and both need it. The dry-run path still needs neither.
+[ "${DRYRUN_FLAG}" -eq 0 ] && aiv_require_cmd ffprobe
 
 MANIFEST="${1:-}"
 OUTPUT="${2:-}"
@@ -153,9 +157,35 @@ MODE_JSON=""
 if [ "${MODE}" = "handoff" ]; then
   MODE_JSON=',"mode":"handoff"'
   printf 'stitch: --mode handoff RE-ENCODES (libx264 -crf 20 -g 8 +faststart -an) — the cut path stream-copies. Audio is dropped by -an; mux a bed afterwards if the chain needs one.\n' >&2
-  [ "${DRYRUN_FLAG}" -eq 0 ] && aiv_require_cmd ffprobe
 fi
 
+# --- 6.4 / 6.5 -------------------------------------------------------------
+# Reading a clip before trusting it. `-c copy` never decodes, so a truncated or
+# zero-byte file concatenates without complaint and the run reports success over
+# an output no player can open — measured, and the defect these two functions
+# exist to close.
+
+# Exit 0 when ffprobe can read a video stream out of "$1".
+clip_is_readable() {
+  ffprobe -v error -select_streams v:0 -show_entries stream=codec_name \
+    -of csv=p=0 "$1" >/dev/null 2>&1
+}
+
+# `<codec>|<width>x<height>|<avg_frame_rate>|<audio:0|1>` for "$1".
+# The four fields the concat demuxer's copy path cannot reconcile between
+# inputs. Printed on one line so a mismatch is one string comparison and the
+# message can name both sides.
+clip_fingerprint() {
+  local v a
+  v="$(ffprobe -v error -select_streams v:0 \
+        -show_entries stream=codec_name,width,height,avg_frame_rate \
+        -of csv=p=0:nk=1 "$1" 2>/dev/null | head -1 | tr '\n' ',')"
+  a="$(ffprobe -v error -select_streams a:0 -show_entries stream=codec_type \
+        -of csv=p=0 "$1" 2>/dev/null | head -1)"
+  [ -n "${a}" ] && a=1 || a=0
+  printf '%s|audio=%s' "${v%,}" "${a}"
+}
+
 skip_match() {
   local id="$1" s
   for s in ${SKIP_IDS}; do
@@ -174,6 +204,14 @@ CONCAT_LIST="${WORK_DIR}/concat.txt"
 # Written only in handoff mode, so the cut path is untouched.
 SEQ_LIST="${WORK_DIR}/seq.tsv"
 : > "${SEQ_LIST}"
+# 6.5: `<scene_id>\t<fingerprint>\t<declared audio_embedded>\t<path>` per kept
+# clip, written on every real run. The concat demuxer's copy path cannot
+# reconcile a codec, resolution or frame-rate change between inputs — it emits a
+# file whose later segments are undecodable — so the inputs are compared before
+# ffmpeg is asked to copy them. Not written in dry-run mode, where no clip is
+# opened at all.
+FP_LIST="${WORK_DIR}/fp.tsv"
+: > "${FP_LIST}"
 
 # Accept both bare-array manifests and the documented object shape
 # (`{ "scenes": [...] }`). Field names tolerate the legacy
@@ -188,6 +226,9 @@ while IFS= read -r row; do
   scene_id="$(printf '%s' "${row}" | jq -r '.scene_id // .id')"
   clip_path="$(printf '%s' "${row}" | jq -r '.clip_path // .expected_clip')"
   audio_embedded="$(printf '%s' "${row}" | jq -r '.audio_embedded // false')"
+  # Never empty: the per-clip list is tab-separated, and `read` collapses an
+  # empty field between tabs, which would shift the path into this column.
+  audio_embedded="${audio_embedded:-false}"
   audio_path="$(printf '%s' "${row}" | jq -r '.audio_path // empty')"
   continuity="cut"
   if [ "${MODE}" = "handoff" ]; then
@@ -214,7 +255,16 @@ while IFS= read -r row; do
     continue
   fi
 
-  if [ ! -f "${clip_path}" ]; then
+  # 6.4: unreadable counts as missing. A file that exists but cannot be
+  # decoded is not a usable clip, and the copy path would never find out.
+  clip_unreadable=0
+  if [ -f "${clip_path}" ] && ! clip_is_readable "${clip_path}"; then
+    clip_unreadable=1
+    printf 'stitch: scene=%s clip exists but ffprobe cannot read a video stream from it: %s\n' \
+      "${scene_id}" "${clip_path}" >&2
+  fi
+
+  if [ ! -f "${clip_path}" ] || [ "${clip_unreadable}" -eq 1 ]; then
     err_json="${PROJECT_DIR}/scenes/${scene_id}/error.json"
     if [ -f "${err_json}" ]; then
       printf 'stitch: scene=%s adapter-error: ' "${scene_id}" >&2
@@ -226,6 +276,9 @@ while IFS= read -r row; do
       missing=$((missing + 1))
       continue
     fi
+    if [ "${clip_unreadable}" -eq 1 ]; then
+      aiv_die 7 "unreadable clip for scene=${scene_id} at ${clip_path} — the file exists but ffprobe found no video stream in it (re-render the scene, pass --skip-scene ${scene_id}, or use --continue)"
+    fi
     aiv_die 7 "missing clip for scene=${scene_id} at ${clip_path} (re-render the scene, pass --skip-scene ${scene_id}, or use --continue)"
   fi
 
@@ -245,11 +298,13 @@ while IFS= read -r row; do
       -c:v copy -c:a aac -shortest "${muxed}" >/dev/null \
       || aiv_die 8 "ffmpeg mux failed for scene=${scene_id}"
     printf "file '%s'\n" "${muxed}" >> "${CONCAT_LIST}"
+    printf '%s\t%s\t%s\t%s\n' "${scene_id}" "$(clip_fingerprint "${muxed}")" "${audio_embedded}" "${muxed}" >> "${FP_LIST}"
     if [ "${MODE}" = "handoff" ]; then
       printf '%s\t%s\n' "${continuity}" "${muxed}" >> "${SEQ_LIST}"
     fi
   else
     printf "file '%s'\n" "${clip_path}" >> "${CONCAT_LIST}"
+    printf '%s\t%s\t%s\t%s\n' "${scene_id}" "$(clip_fingerprint "${clip_path}")" "${audio_embedded}" "${clip_path}" >> "${FP_LIST}"
     if [ "${MODE}" = "handoff" ]; then
       printf '%s\t%s\n' "${continuity}" "${clip_path}" >> "${SEQ_LIST}"
     fi
@@ -269,6 +324,14 @@ if [ "${DRYRUN_FLAG}" -eq 1 ]; then
   exit 0
 fi
 
+# Seconds of shortfall tolerated between the summed inputs and the output.
+# Container rounding and a trailing partial frame are not a defect; half a
+# second is well above both and well below any dropped scene. Overridable
+# because a shortfall is the one failure in 6.5 that cannot be provoked with a
+# fixture — a file ffprobe reads as whole and ffmpeg copies as short is not
+# something `testsrc` can produce — so the branch would otherwise ship having
+# never been seen fire. The test drives it to a negative tolerance and back.
+DURATION_TOLERANCE="${AIV_DURATION_TOLERANCE:-0.5}"
 # The re-encode settings are one constant, used by both handoff branches, so a
 # port cannot drift them apart.
 HANDOFF_VCODEC="libx264"
@@ -351,9 +414,59 @@ if [ "${MODE}" = "handoff" ]; then
       || aiv_die 8 "ffmpeg handoff xfade failed (manifest=${MANIFEST}, output=${OUTPUT})"
   fi
 else
+  # 6.5, BEFORE the copy. `-c copy` never decodes, so a codec / resolution /
+  # frame-rate change between inputs produces a file that plays the first
+  # segment and then falls apart, with exit 0 and the success JSON. The first
+  # clip is the reference; the first divergent scene is named, with both sides,
+  # and the message points at the path that CAN reconcile them.
+  ref_fp=""
+  ref_id=""
+  while IFS="$(printf '\t')" read -r fp_id fp _fp_audio fp_path; do
+    [ -n "${fp_id}" ] || continue
+    # NO standalone check on `audio_embedded` here, and the reason is the
+    # field's established meaning in this script rather than a convenience.
+    # Two lines above, the mux branch reads it as a ROUTING HINT — "this clip
+    # ships its own audio, do not mux the sibling audio_path" — never as an
+    # assertion that an audio stream exists. A first revision of this check
+    # read it as an assertion and refused a manifest that over-claims, which
+    # reds `ai_video_stitch_handoff.test.ts`: its fixture declares
+    # `audio_embedded: true` over `lavfi` clips that carry no audio, and that
+    # declaration was never load-bearing because nothing read it.
+    #
+    # What D9 is actually about is the DROP: "a mixed audio/no-audio concat
+    # drops the audio of every later segment". A mix is exactly what the
+    # fingerprint's `audio=` field catches below, fatally. A uniformly
+    # audioless set drops nothing — the output simply has no audio, which is
+    # what the inputs had — so refusing it would be a manifest-accuracy
+    # complaint wearing a decode failure's exit code.
+    if [ -z "${ref_fp}" ]; then
+      ref_fp="${fp}"
+      ref_id="${fp_id}"
+    elif [ "${fp}" != "${ref_fp}" ]; then
+      aiv_die 8 "stitch: scene=${fp_id} does not match scene=${ref_id} on the copy path — ${fp} vs ${ref_fp}. 'ffmpeg -f concat -c copy' cannot reconcile a codec, resolution, frame-rate or audio-presence change and would emit a file that decodes only as far as the first divergence. Re-run with --mode handoff, which re-encodes every input to one shape, or re-render the divergent scene to match."
+    fi
+  done < "${FP_LIST}"
+
   ffmpeg -loglevel error -y -f concat -safe 0 -i "${CONCAT_LIST}" \
     -c copy "${OUTPUT}" >/dev/null \
     || aiv_die 8 "ffmpeg concat failed (manifest=${MANIFEST}, output=${OUTPUT})"
+
+  # 6.5, AFTER the copy. The sum of what went in, against what came out. A
+  # short output is the failure mode a copy-path concat reaches silently; the
+  # tolerance is stated rather than implied, and it is generous on purpose —
+  # container rounding and a trailing partial frame are not a defect.
+  expected_dur=0
+  while IFS="$(printf '\t')" read -r _fp_id _fp _fp_audio fp_path; do
+    [ -n "${fp_path}" ] || continue
+    d="$(_probe_duration "${fp_path}")"
+    [ -n "${d}" ] || aiv_die 8 "stitch: cannot read duration of ${fp_path} after concat"
+    expected_dur="$(awk -v a="${expected_dur}" -v d="${d}" 'BEGIN { printf "%.6f", a + d }')"
+  done < "${FP_LIST}"
+  actual_dur="$(_probe_duration "${OUTPUT}")"
+  [ -n "${actual_dur}" ] || aiv_die 8 "stitch: wrote ${OUTPUT} and cannot read its duration back"
+  awk -v e="${expected_dur}" -v a="${actual_dur}" -v t="${DURATION_TOLERANCE}" \
+    'BEGIN { exit !(e - a > t) }' \
+    && { rm -f "${OUTPUT}"; aiv_die 8 "stitch: output is short — ${actual_dur}s against ${expected_dur}s of input (tolerance ${DURATION_TOLERANCE}s, missing=${missing} scene(s) already excluded). The concat reported success and produced less video than it was given, which is what an unreadable or mid-file-truncated input does on the copy path."; }
 fi
 
 printf '{"output":"%s","scenes":%d,"missing":%d%s}\n' \

package/src/scripts/ai_council/airgap.ts

@@ -1,3 +1,4 @@
+// egress-content: fixed-corpus — a DNS lookup of the provider hosts; no request body exists
 /**
  * Airgap detection for the AI Council installer / first-run (step-9 P11 · U1).
  *

package/src/scripts/ai_council/api_transport.ts

@@ -1,15 +1,16 @@
+// egress-content: session-content asserted — every body passes councilEgress().check in curlJsonPost before curl is spawned; the council bundle is replaced through the engine first
 /**
  * The council's synchronous HTTP transport, and the per-provider shims that
  * turn it into the SDK-shaped callables `clients.ts::ask()` reads.
  *
- * Extracted from `clients.ts` (road-to-admissible-council-seats 1.1). Two
- * reasons, and only the first is about tidiness:
+ * Extracted from `clients.ts`. Two reasons, and only the first is about
+ * tidiness:
  *
  * 1. `clients.ts` is ~1,370 lines past the 1,500-line ceiling
  *    `check_source_size_budget` ratchets, so every line added there costs one
  *    excess line. The three shims below are new code; putting them in a file
- *    UNDER the ceiling is what lets 1.1 land without raising a baseline.
- * 2. Before 1.1 exactly one provider (OpenAI) had a live transport and the
+ *    UNDER the ceiling is what lets them land without raising a baseline.
+ * 2. Before the extraction exactly one provider (OpenAI) had a live transport and the
  *    other four constructors threw `… package not installed. pip install …`
  *    after the api-key check — so `mode: api` was dead for gemini, xai and
  *    perplexity. A shared shim module is the honest home for "how this
@@ -25,9 +26,24 @@
 
 import { spawnSync } from 'node:child_process';
 
+import { councilEgress } from './council_egress.js';
+
 /** The one network primitive. Swappable so tests never reach the network. */
 export type JsonPost = (url: string, extraHeaders: string[], body: unknown) => unknown;
 
+/** Every string a JSON body carries, in order, decoded — what a provider would read. */
+export function stringLeaves(value: unknown, out: string[] = []): string[] {
+    if (typeof value === 'string') out.push(value);
+    else if (Array.isArray(value)) for (const v of value) stringLeaves(v, out);
+    else if (value !== null && typeof value === 'object') {
+        for (const [k, v] of Object.entries(value as Record<string, unknown>)) {
+            out.push(k);
+            stringLeaves(v, out);
+        }
+    }
+    return out;
+}
+
 export const GEMINI_BASE_URL = 'https://generativelanguage.googleapis.com/v1beta';
 
 /**
@@ -38,6 +54,13 @@ export const GEMINI_BASE_URL = 'https://generativelanguage.googleapis.com/v1beta
  * a non-2xx status so `ask()`'s catch surfaces it as a member error.
  */
 export function curlJsonPost(url: string, extraHeaders: string[], body: unknown): unknown {
+    // The final egress check over every string the body carries, immediately
+    // before the request is written. The headers carry the transport's own
+    // credential and are not body.
+    const refusal = councilEgress().check(stringLeaves(body).join('\n'));
+    if (refusal !== null) {
+        throw new Error(`egress refused: ${refusal.reason} (${refusal.what}); nothing was sent`);
+    }
     const args = ['-sS', '-X', 'POST', url, '-H', 'content-type: application/json'];
     for (const h of extraHeaders) {
         args.push('-H', h);